luxolus/open-consul
2
0
Fork 0
Code Issues 1 Pull requests Packages Releases Wiki Activity
20345 commits 1 branch 1 tag 358 MiB
Commit graph

20345 commits

This branch
This branch
All branches
Author SHA1 Message Date
hc-github-team-consul-core d2e1e205c9
Backport of Add release notes 1.16 rc into release/1.16.x (#17686) 
* no-op commit due to failed cherry-picking

* Add release notes 1.16 rc (#17665)

* Merge pull request #5773 from hashicorp/docs/rate-limiting-from-ip-addresses-1.16

updated docs for rate limiting for IP addresses - 1.16

* Merge pull request #5609 from hashicorp/docs/enterprise-utilization-reporting

Add docs for enterprise utilization reporting

* Merge pull request #5734 from hashicorp/docs/envoy-ext-1.16

Docs/envoy ext 1.16

* Add release notes for 1.16-rc

* Add consul-e license utlization reporting

* Update with rc absolute links

* Update with rc absolute links

* fix typo

* Apply suggestions from code review

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update to use callout component

* address typo

* docs: FIPS 140-2 Compliance (#17668)

* Page + nav + formatting

* link fix

* Update website/content/docs/enterprise/fips.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/enterprise/fips.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/enterprise/fips.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/enterprise/fips.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/enterprise/fips.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/enterprise/fips.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/enterprise/fips.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/enterprise/fips.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/enterprise/fips.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/enterprise/fips.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* link fix

* Apply suggestions from code review

Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>

* Update website/content/docs/enterprise/fips.mdx

---------

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>

* fix apigw install values file

* fix typos in release notes

---------

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>

---------

Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
 2023-06-12 18:56:20 -07:00
hc-github-team-consul-core 4de1f80777
Backport of CAPIgw for K8s installation updates for 1.16 into release/1.16.x (#17675) 
* backport of commit 2cfd6a42d15e2a122f3676e851889d4af75e3852

* backport of commit b7be18de72e05c5665d3e7ac7c7f7b9b2d95d8e4

* resolve merge conflicts

---------

Co-authored-by: trujillo-adam <ajosetru@gmail.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
 2023-06-12 18:31:56 -07:00
hc-github-team-consul-core effdf7e917
backport of commit 9c4b1303129b601bf326a0c39f50150741d53e8d (#17685) 
Co-authored-by: trujillo-adam <ajosetru@gmail.com>
 2023-06-12 18:28:59 -07:00
hc-github-team-consul-core a304daccc2
backport of commit 9ec2b3807aaa86f6af0a938d348f4649f83f51fb (#17672) 
Co-authored-by: Hariram Sankaran <56744845+ramramhariram@users.noreply.github.com>
 2023-06-12 16:34:51 -07:00
hc-github-team-consul-core 30b6adc650
Backport of docs: minor fixes to JWT auth docs into release/1.16.x (#17681) 
* no-op commit due to failed cherry-picking

* docs: minor fixes to JWT auth docs (#17680)

* Fixes

* service intentions fixes

---------

Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
 2023-06-12 15:51:41 -07:00
hc-github-team-consul-core 0998598c1f
Backport of docs: JWT Authorization for intentions into release/1.16.x (#17679) 
* backport of commit 65561996d7207e5bdc1cd17c6b0e72c8a967269a

* backport of commit 08204fec0837c389ca489e13714afa2bfa4308d1

* backport of commit 33cede6ea5c96b12561fba7d98a201eb50aaf2c7

---------

Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
 2023-06-12 15:18:44 -07:00
hc-github-team-consul-core 4050a7eaad
Backport of docs: Sameness Groups into release/1.16.x (#17673) 
* no-op commit due to failed cherry-picking

* docs: Sameness Groups (#17628)

* port from enterprise branch

* Apply suggestions from code review

Co-authored-by: shanafarkas <105076572+shanafarkas@users.noreply.github.com>

* Update website/content/docs/connect/cluster-peering/usage/create-sameness-groups.mdx

* next steps

* Update website/content/docs/connect/cluster-peering/usage/create-sameness-groups.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

* Update website/content/docs/k8s/connect/cluster-peering/usage/create-sameness-groups.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

---------

Co-authored-by: shanafarkas <105076572+shanafarkas@users.noreply.github.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

---------

Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: shanafarkas <105076572+shanafarkas@users.noreply.github.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
 2023-06-12 14:16:10 -07:00
hc-github-team-consul-core ae695348d1
backport of commit d1c6d9710f9f8e06b7278bbfd45201e5cb0eb7c0 (#17669) 
Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>
 2023-06-12 18:46:36 +00:00
hc-github-team-consul-core 5fd91ea014
Backport of Add generic experiments configuration and use it to enable catalog v2 resources into release/1.16.x (#17655) 
* backport of commit ad6652a47b5c5f9e1b8aed673922b918f56dbfcc

* backport of commit 7a1e99b6b774257ef6e293c2d47375e3b2332b9a

---------

Co-authored-by: Matt Keeler <mjkeeler7@gmail.com>
 2023-06-12 18:34:15 +00:00
hc-github-team-consul-core a1df92fe98
Backport of Default ProxyType for builtin extensions into release/1.16.x (#17667) 
* backport of commit 131d234bdab165d96601b8064c49ce17ee5f141a

* backport of commit 1adc48734d9347599c8a694d427c6b26e5a748a1

---------

Co-authored-by: Chris Thain <chris.m.thain@gmail.com>
 2023-06-12 18:13:29 +00:00
hc-github-team-consul-core dd67441406
Backport of Add new Consul 1.16 docs into release/1.16.x (#17666) 
* backport of commit 755bd95074751385ee0a8bbbe953d4a5dd8851b6

* backport of commit 5e7458718ecc8b92f45a44e8f61407316581bdb8

* backport of commit 5732d3b49bb23df9ff0746fe7c480afacef0ded2

* backport of commit 779f00378f8d31099be9e9a85124fe62ddfaceba

* backport of commit c16da9777a98176f03feb26b24c66c07d0ab9e40

* backport of commit 7662916db4d10243b37ba57bb31c02e282874937

* backport of commit 4ccbc678a55b0f03150f7c00a1993781c296f00d

---------

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
Co-authored-by: Tu Nguyen <im2nguyen@gmail.com>
 2023-06-12 10:39:44 -07:00
hc-github-team-consul-core dbda9351ec
Backport of api-gateway: stop adding all header filters to virtual host when generating xDS into release/1.16.x (#17658) 
* backport of commit 41a0d77e482abe8af78e145e7462f152336038a0

* backport of commit 9e5128ddbf20132837c88f2f2d426520950c58ba

* backport of commit de7888a54d0da45fba6842dc481588df009dc3f0

---------

Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
 2023-06-12 16:58:05 +00:00
hc-github-team-consul-core 58437bfdc8
backport of commit 6110cd6c7ccee249065672f87248e4b07fee4556 (#17662) 
Co-authored-by: Poonam Jadhav <poonam.jadhav@hashicorp.com>
 2023-06-12 16:47:03 +00:00
hc-github-team-consul-core fdbf5b9dd9
Backport of docs: Reference doc updates for permissive mTLS settings into release/1.16.x (#17652) 
* backport of commit 1602c996fd1bc6d73f9a2c34d93687700307382a

* backport of commit 132c6ee6c5e119b904d2133cb93722a7ab321634

* backport of commit 5e64b930f55531d4d6668b797b5643b98489d163

* backport of commit 83a7b3fe52adc04835c52ffeb08adbcc3ac23d17

---------

Co-authored-by: Paul Glass <pglass@hashicorp.com>
 2023-06-12 15:31:18 +00:00
hc-github-team-consul-core 5a7651672a
backport of commit c04073135b4fd3b1564011ef4c765ec0b130d10d (#17650) 
Co-authored-by: Bryce Kalow <bkalow@hashicorp.com>
 2023-06-12 14:49:06 +00:00
hc-github-team-consul-core 4d61326013
Backport of PmTLS and tproxy improvements with failover and L7 traffic mgmt for k8s into release/1.16.x (#17645) 
* backport of commit e4c2789cefde79333e10c3af7a3bbd6c594b20a6

* backport of commit c3a2d0b9696cdda90169b646404cf86f7f37f76e

* backport of commit 81f8f7c04ec70b9e513b2e40f8c2f29d105a7c4d

* backport of commit 63d12fbc04e89ad0d1cc6aa34f1a2d7d1c32ff3c

* backport of commit 73d7179c55de6780c27fa05bdcbf1ef1c84862f0

* backport of commit f8873368cb6289d1460337ee54604d2eae0489b8

---------

Co-authored-by: trujillo-adam <ajosetru@gmail.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
 2023-06-12 07:06:15 -07:00
hc-github-team-consul-core 3c996fb16e
backport of commit ef688704aab5f2e413b7d190ca36198b2c242009 (#17623) 
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
 2023-06-09 16:29:04 +00:00
hc-github-team-consul-core accd2023a7
Backport of [API Gateway] Fix rate limiting for API gateways into release/1.16.x (#17635) 
* backport of commit fb2f3b61004d9ef2296b51306ddbf5b6d72679ed

* backport of commit 178abb8495ba4bb35c29a835965e3f244a385865

* backport of commit 77b399877413c6e65669659deb8962c2cc5b52f6

* backport of commit a245b326ac030f7ef3292e7bbdb58e0b2850a12f

---------

Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
 2023-06-09 12:40:03 +00:00
hc-github-team-consul-core 5b07087e4b
backport of commit 6fc8624ccfb8eb0318726d5ed81546481f250cbc (#17632) 
Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>
 2023-06-09 02:50:07 +00:00
Michael Zalimeni efdf053b42
Revert commenting of go.mod replaces (#17630) 
Other recent releases have not commented out the replace directives in
go.mod. Though it would be ideal to pin our submodules in the release
artifacts we produce, we need to tidy up our build pipeline to make this
feasible.

In the meantime, revert this change to keep the dependency entry
updates, but exclude them from the effective dependency tree.
 2023-06-09 00:44:34 +00:00
hc-github-team-consul-core 23605142f5
backport of commit beef7233cb7483c8ba19140e66fcbec187620c80 (#17629) 
Co-authored-by: Ronald Ekambi <ronekambi@gmail.com>
 2023-06-09 00:06:35 +00:00
Michael Zalimeni e1458b94f5
Update submodules for 1.16.0-rc1 release (#17626) 
Update to new RC submodule versions. These will be updated again for the
1.16.0 release.
 2023-06-08 18:45:42 -04:00
Michael Zalimeni e25176bd70 Update troubleshoot submodule dependencies 
Bump api, envoyextensions versions to latest.
 2023-06-08 16:48:05 -04:00
Michael Zalimeni a11ba66c94 Update envoyextensions submodule dependencies 
Bump api, sdk versions to latest.
 2023-06-08 16:14:49 -04:00
Michael Zalimeni 127c2a86ac Update api submodule sdk dependency 2023-06-08 16:03:08 -04:00
hc-github-team-consul-core 175f61f241
Backport of [API Gateway] Fix trust domain for external peered services in synthesis code into release/1.16.x (#17616) 
* backport of commit 63e87434721824902d1bd8c7ef72456615020180

* backport of commit 896f11789b89062c745433a17dc37da5b56185fd

---------

Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
 2023-06-08 18:11:44 +00:00
hc-github-team-consul-core dcf9b04c34
Backport of backport ent changes to oss into release/1.16.x (#17617) 
* backport of commit dc9c08d3b8cc1eda95a05a8b041ab2a3a5248dd0

* backport of commit 1271705a5cce5fe5e9487fed2ac965ab7aac3d59

---------

Co-authored-by: Ronald Ekambi <ronekambi@gmail.com>
Co-authored-by: Ronald <roncodingenthusiast@users.noreply.github.com>
 2023-06-08 16:45:28 +00:00
hc-github-team-consul-core 4d369c4aa4
backport of commit 2735bbe60f316a4d4539752a8dd63a3ca360e49b (#17613) 
Co-authored-by: Eric <eric@haberkorn.co>
 2023-06-08 14:41:44 +00:00
hc-github-team-consul-core 81eafc221b
Backport of Add writeAuditRPCEvent to agent_oss into release/1.16.x (#17608) 
* backport of commit d77784ba51fd6a5d598ea2b87cb6e36e0fed8e72

* backport of commit f5a557dd7a5995094b3af96f1c522d49acfe795b

* backport of commit 1d782d63c437ab16e30d5bd00a6b8c3cbad08845

---------

Co-authored-by: Ronald Ekambi <ronekambi@gmail.com>
 2023-06-07 19:01:05 -04:00
Michael Zalimeni c9143cff36
Disable terminating-gateway for property-override (#17605) 
More validation is needed to ensure this behaves as expected; in the
meantime, align with docs and disable this proxy type.
 2023-06-07 19:39:25 +00:00
R.B. Boyer cf31d61b07
fix some testing.T retry.R mixups (#17600) 
Fix some linter warnings before updating the lint-consul-retry code in hashicorp/lint-consul-retry#4
 2023-06-07 13:53:27 -05:00
Dhia Ayachi d331501632
fix rate limiting mapping to be the same between api and struct packages (#17599) 2023-06-07 14:50:22 -04:00
skpratt eaed8c55c1
update tests for fips (#17592) 2023-06-07 10:57:56 -05:00
Matt Keeler 08f9cd1678
Implement the service endpoints controller (#17216) 
* Add a ReplaceType dep mapper and move them into their own file

* Implement the service endpoints controller

* Implement a Catalog Controllers Integration Test
 2023-06-06 17:09:48 -04:00
Michael Zalimeni 378a15af32
Fix Property Override Services parsing (#17584) 
Ensure that the embedded api struct is properly parsed when
deserializing config containing a set ResourceFilter.Services field.

Also enhance existing integration test to guard against bugs and
exercise this field.
 2023-06-06 15:40:37 -04:00
Joshua Timmons cb2999e43c
Fix metric names in Consul agent telemetry docs (#17577) 2023-06-06 14:42:30 -04:00
Michael Zalimeni 1147603f97
Add Prop Override Envoy extension integration test (#17569) 2023-06-06 10:04:31 -04:00
Andrew Stucki e90f251e40
Fix subscribing/fetching objects not in the default partition (#17581) 
* Fix subscribing/fetching objects not in the default namespace

* add changelog
 2023-06-06 09:09:33 -04:00
cskh abed1cbda5
docs: clarify the behavior of prepending hostname to metrics (#17521) 
* docs: clarify the behavior of prepending hostname to metrics

* Update website/content/docs/agent/config/config-files.mdx

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>

---------

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
 2023-06-05 23:47:26 +00:00
Matt Keeler e909289454
Various bits of cleanup detected when using Go Workspaces (#17462) 
TLDR with many modules the versions included in each diverged quite a bit. Attempting to use Go Workspaces produces a bunch of errors.

This commit:

1. Fixes envoy-library-references.sh to work again
2. Ensures we are pulling in go-control-plane@v0.11.0 everywhere (previously it was at that version in some modules and others were much older)
3. Remove one usage of golang/protobuf that caused us to have a direct dependency on it.
4. Remove deprecated usage of the Endpoint field in the grpc resolver.Target struct. The current version of grpc (v1.55.0) has removed that field and recommended replacement with URL.Opaque and calls to the Endpoint() func when needing to consume the previous field.
4. `go work init <all the paths to go.mod files>` && `go work sync`. This syncrhonized versions of dependencies from the main workspace/root module to all submodules
5. Updated .gitignore to ignore the go.work and go.work.sum files. This seems to be standard practice at the moment.
6. Update doc comments in protoc-gen-consul-rate-limit to be go fmt compatible
7. Upgraded makefile infra to perform linting, testing and go mod tidy on all modules in a flexible manner.
8. Updated linter rules to prevent usage of golang/protobuf
9. Updated a leader peering test to account for an extra colon in a grpc error message.
 2023-06-05 16:08:39 -04:00
Curt Bushko efac2f8d1f
Generate helm docs for release consul-k8s 1.1.2 (#17568) 
* generate docs
 2023-06-05 16:04:54 -04:00
malizz daa16ae57c
continue anti-entropy sync when failures exist (#17560) 2023-06-05 12:16:21 -07:00
Andrew Stucki 07831049be
Fix up case where subscription is terminated due to ACLs changing or a snapshot restore occurring (#17566) 
* Fix up case where subscription is terminated due to ACLs changing or a snapshot restore occurring

* Add changelog entry

* Switch to use errors.Is
 2023-06-05 13:10:17 -04:00
malizz 0a21fb9cd8
add changelog entries for 1.15.3 (#17558) 2023-06-02 12:35:21 -07:00
Dave Rawks 09965d9c7c
Resolves issue-16844 - systemd notify by default (#16845) 
* updates `consul.service` systemd service unit to use `Type=notify` to
  resolve issue #16844
* add changelog update to match
 2023-06-02 10:04:48 -07:00
cskh 8a8913317f
chore: fix the error message format (#17554) 2023-06-02 13:37:44 +00:00
Poonam Jadhav 69e0c4b8b6
changelog: add changelog for reporting (#17535) 2023-06-02 08:59:48 -04:00
Luiz Aoqui 054ba0349c
docs: add note about Nomad support for Consul 1.13.8 (#17512) 
* docs: add note about Nomad support for Consul 1.13.8

* apply code review changes
 2023-06-01 22:09:21 +00:00
Dan Stough b068b41288
Revert "fix(connect envoy): set initial_fetch_timeout to wait for initial xDS… (#17317)" (#17540) 
This reverts commit be7d2a4d842a8cbab7ce6161e88807a1f0a946b0.
 2023-06-01 13:10:41 -04:00
Michael Zalimeni c448359677
Avoid panic applying TProxy Envoy extensions (#17537) 
When UpstreamEnvoyExtender was introduced, some code was left duplicated
between it and BasicEnvoyExtender. One path in that code panics when a
TProxy listener patch is attempted due to no upstream data in
RuntimeConfig matching the local service (which would only happen in
rare cases).

Instead, we can remove the special handling of upstream VIPs from
BasicEnvoyExtender entirely, greatly simplifying the listener filter
patch code and avoiding the panic. UpstreamEnvoyExtender, which needs
this code to function, is modified to ensure a panic does not occur.

This also fixes a second regression in which the Lua extension was not
applied to TProxy outbound listeners.
 2023-06-01 13:04:39 -04:00